Vulnerability in OMFLOW Allowing Remote Attackers to Gain Control of Server
CVE-2024-8779

8.8HIGH

Key Information:

Status
Vendor
CVE Published:
16 September 2024

What is CVE-2024-8779?

OMFLOW, a product of The SYSCOM Group, contains a significant security vulnerability that permits unauthorized remote access to modify essential system settings. Attackers with standard user privileges can manipulate configuration settings or establish new user accounts, including those with administrative rights. This flaw poses considerable risks to the integrity of server management and overall security, allowing potential takeovers by malicious actors.

Affected Version(s)

OMFLOW 1.1.6.0 <= 1.2.1.2

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-8779 : Vulnerability in OMFLOW Allowing Remote Attackers to Gain Control of Server